Basic Analysis and Security Engine (BASE) 1.4.5 - adminindex.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - adminindex.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Pixie CMS 1.0.4 - adminindex.php SQL Injection

Pixie CMS 1.0.4 - adminindex.php SQL Injection source: https://www.securityfocus.com/bid/45937/info Pixie is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

KDPics 1.18 - adminindex.php Authentication Bypass

KDPics 1.18 - adminindex.php Authentication Bypass source: https://www.securityfocus.com/bid/38603/info KDPics is prone to a vulnerability that lets an attacker add an administrative user because it fails to adequately secure access to administrative functionality. This may allow the attacker to...

w3bcms - adminindex.php SQL Injection

w3bcms - adminindex.php SQL Injection source: https://www.securityfocus.com/bid/33310/info The 'w3bcms' application is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacke...

CVE-2008-2038

Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby and 2 sort parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-2038

TurnKey Web Tools SunShop Shopping Cart 4.1.0 has multiple SQL injection vulnerabilities in admin/adminindex.php that allow remote authenticated administrators to execute arbitrary SQL commands via the (1) orderby and (2) sort parameters. This CVE entry notes provenance is unknown and details are...

iPrimal Forums - adminindex.php Change User Password

iPrimal Forums - adminindex.php Change User Password !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST...

CVE-2005-4787

Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2005-4787 via endpoints that execute PHP’s phpinfo() (index.php, admin/index.php, admin/adminindex.php), potentially exposing sensitive information. The root cause is the direct invocation of phpinfo() in these pages, enabling information...